Remote code execution in Microosft Windows DNS Server

Published: 2018-12-11 21:44:04
Severity High
Patch available YES
Number of vulnerabilities 1
CVE ID CVE-2018-8626
CVSSv3 8.5 [CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C]
CWE ID CWE-122
Exploitation vector Network
Public exploit N/A
Vulnerable software Windows Server
Windows
Vulnerable software versions Windows Server 2012 R2
Windows Server 2016
Windows Server 2019
Windows Server 1709
Windows Server 1803
Windows 10 1607
Windows 10 1709
Windows 10 1803
Windows 10 1809
Vendor URL Microsoft

Security Advisory

1) Buffer overflow

Description

The vulnerability allows a remote attacker to execute arbitrary code on the target system.

The vulnerability exists due to a boundary error when processing DNS requests. A remote attacker can send a specially crafted DNS request, trigger heap-based buffer overflow and execute arbitrary code on the target system.

Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.

Remediation

Install updates from vendor's website.

External links

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8626

Back to List